Forgot your password?
typodupeerror

Comment Re:seriously - who certified or tested this (Score 1) 36

Absolutely, yes. Single-chip designs are always compromises, for example you could screw up some on-chip hardware RNGs by lowering the supply voltage, using irregular clocking, and a bunch of other tricks. A proper HSM has a ton of additional circuitry to isolate it from external influences on its operation. A single SoC isn't an HSM no matter what the vendor's sales staff tell you.

Comment Re:seriously - who certified or tested this (Score 2) 36

No-one certified it. Proper HSMs are created by people with decades of experience and get enormous amounts of evaluation by other people with decades of experience. "Hardware wallets" are hobby projects created by people who think they can take an STM32, turn on the security bits, and sell it as an HSM. The crowdfunding will go well because the crypto bros will go gaga over it, but don't expect it to actually be secure.

Comment Re:You can still get around it (Score 1) 28

You greatly underestimate the EU. I know it's hard to imagine politicians that aren't working for corporations first, but the way the EU is set up it's very difficult for them to gain traction. Look at all the pissing and moaning about GDPR, RoHS and so forth. The EU made it happen anyway.

This isn't saying much. GDPR has improved neither privacy nor security. EU regulation has the same effectiveness of CA cancer warnings.

Comment Re:Sales managers are (Score 1) 180

It's public shaming, and you can go fuck yourself. This person was right to sue and they're gonna win.

This is premature. All anyone knows at this point is one persons story. Actual context and circumstances matter.

Do you want to be publicly shamed about your performance in front of your entire cadre of coworkers?

Depends, would I want someone to publicly tell me to "go fuck myself"?

Been around enough shops to see the boards sales goons keep with their rankings. Seems to be common enough for everyone to know where everyone else in the shop stands. (public shame or fame included) For me the question of the pies.. aside from volunteering to participate how it was actually intended and received not the facts of what occurred.

Personally I'd take this arrangement (and the pies) any day over performance reviews at shit companies I've worked for in the past. At least here judgement is objective and not contingent upon mental disorders and the political scheming of lazy hacks.

Neither does anyone else.

I don't think legal liability should be based on what people want.

If there is a performance discussion to be had, it should be in a 1:1 setting, and it should be CONSTRUCTIVE.

I disagree with this sentiment. I think some competition which necessarily implies public awareness of the performance of others is healthy in any organization.

Literally nobody's performance will improve through humiliation.

This is an assumption on your part based on one persons story.

Tell us you know nothing about managing people, without telling us you know nothing about managing people.

This "tell us" "without telling us" rhetoric is a pointless entirely derisive device that conveys no objective information of any kind.

Comment Re: Enron Husk desperate to stop the stock freefal (Score 1) 146

"The US is basically invasion proof"
Tell us you have learned literally nothing from the Russian invasion of Ukraine without telling us.

The Ukraine war is a WWI style war of attrition massively favoring defending forces. If you look at the map Russians are only in areas of Ukraine with contiguous unbroken communication lines to Russia and those communication lines are continuously harassed in depth.

While every country is increasingly vulnerable to remote bombing the opposite is true when it comes to invasion.

Comment Robo recall (Score 1) 146

The FCC has no such authority to ban inverters or robots or anything else. What this is really about is targeting of radios in such devices that require FCC approval and denying approval not based on technical characteristics of the hardware but politics. This is the same covered list trick as the "router ban" which also bans radios not routers.

https://www.law.cornell.edu/cf...

And of course just like the router ban it comes with an arbitrary shakedown regime:

"The Executive Branch interagency body has established a process in which entities producing power inverters or advanced robotic devices in a foreign country can request an evaluation as to whether their devices do not pose unacceptable risks to national security and receive Conditional Approvals that would exempt the devices from the Covered List"

Comment Re:Odd hill to stand on (Score 1) 85

I'm not going to waste a lot more of my time, since you clearly have a serious case of Dunning Kruger.

Dunning Kruger the Internet meme is discredited nonsense.

"Our results supported the third hypotheses by confirming that (a) peoples' self-assessed competence generally accords with their demonstrated proficiency and (b) peoples' frequencies of self-assessed underestimation of their competence are similar to their frequencies of overestimation."
"However, our study refuted two tenets of the second hypothesis by showing that (a) no strong propensity exists toward overconfidence in self-assessment ratings and (b) few people (about 5%) merit their being characterized as "unskilled and unaware of it"

https://digitalcommons.usf.edu...

The "know your rights" article is about *your* *rights*, not police officers.

All it talks about is rights in relations to encounters with police officers. It is explicitly all about the police and even mentions laws that apply specifically in relation to police encounters. Anyone can follow the link and make up their own mind what it does and does not say. Your reference was clearly never intended to serve as an exhaustive analysis of the domain.

Audio recording is not video recording

Nobody is suggesting otherwise. Meta glasses also have capability of recording audio and your statement "News flash ... like it or not, in a public place you have consented to, and almost certainly are, being recorded." does not stipulate a specific modality.

Stop pretending you know what you are talking about. You have *zero* expectation of privacy with regard to video recording in public, and that is true in every single state as well as in Puerto Rico. For Christ sake man ... do some research and stop wasting peoples time while simultaneously making it clear to everyone who actually knows what they are talking about that you are now a willfully clueless buffoon.

Stop pretending you are smarter than the lawyers of the EFF:

"we often hear a familiar refrain: "you don't have an expectation of privacy in public." This is not true. In the United States, you do have some expectation of privacy - even in public - and it's important to stand up and protect that right."

https://www.eff.org/deeplinks/...

Further my statements were concerning the use of data. Recall what I actually said "Being in a public space is not consent and just because you gather information from public areas or even public airwaves does not grant one carte blanch to do as they please."

Comment Re:If you're paying attention you know why (Score 1) 76

I see you are doubling down on the stupid. Well, there has to be a reason so many code is so insecure. You are clearly one. You are clearly fully incompetent and have no business writing any code where security matters.

Your "explanations" are totally insane. They are exactly the wrong thing to do when you want security. Not initialize stack variables so the compiler can, maybe (usually not), detect uninitialized use? What are you smoking?

Absent the barking like a rabid dog there is nothing left of your remarks. No coherent explanations, nothing of substance. I will note you have also failed to provide a single example of something that wasn't a "complete non-issue" in "competently done code" and completely ignored TOCTOU response to your obviously ignorant commentary regarding use after free.

Just shitting on people without bringing any coherent argument whatsoever to the table is a waste of everyone's time.

When you don't initialize variables the compiler, static and runtime analyzers are able to produce warnings of access without initialization in the code path. Often you want variables on the stack to be initialized where they are declared. In other instances the initial assignments are unknown at the time of declaration and will come later. By initializing everything regardless you needlessly bypass analysis logic baked into compilers, static and runtime analyzers. This shit is there for a reason and it is used to find bugs. I've used these methods successfully in the past to find logic bugs.

You fucking initialize them so they do not get used uninitialized! (Or rather initialized by an attacker...) If you are really deeply afraid of "logic errors", then you initialize them in a way that will make it obvious something else should be in there!

Have you learned coding in some 3rd rated auto-mechanic shop or what?

It's almost as if you've never heard of -ftrivial-auto-var-init=zero which wouldn't surprise me in the least given the demonstrated lack of lack of substance in your highly ignorant statements. Sounds to like you are just a security d00d and don't really know shit about writing software.

Slashdot Top Deals

Disobedience: The silver lining to the cloud of servitude. -- Ambrose Bierce

Working...